This Privacy Policy explains how StreakParty ("StreakParty", "we", "us") collects, uses, and protects your information when you use the StreakParty mobile app, web app, and website (together, the "Service"). By using the Service you agree to this policy.
1. Information we collect
Information you provide
- Account details — your email address, display name, and password (stored only as a salted hash — we never store your actual password), plus an optional avatar photo, bio, and location if you add them to your profile.
- Social sign-in — if you sign in with Google or Facebook, we receive your name, email address, and profile picture from that provider. We never receive or store your password for those services.
- Habit and streak data — the streaks you create or join, your daily check-ins, and optional check-in photos you upload.
- Social content — friend connections, messages you send in direct and group chats, and streak invitations.
Information collected automatically
- Session and device information — basic device/browser identifiers (such as the user-agent string) used to manage your login sessions securely.
- Usage records — timestamps such as when you last logged in or checked in, used to power streak counts, leaderboards, and achievements.
We do not collect your precise location, contacts, or advertising identifiers, and the Service does not show third-party ads.
2. How we use your information
- To provide the Service — accounts, streak tracking, leaderboards, achievements, friends, and messaging.
- To keep you signed in and keep your account secure (authentication tokens, session management).
- To send service emails such as email verification and password resets.
- To respond to support requests you send us.
- To maintain safety — investigating abuse, spam, or violations of our Terms of Service.
We do not sell your personal information, and we do not use it for third-party advertising.
3. Who can see your content
- Public streaks — the streak name, description, member list, leaderboard, and your check-in activity within it are visible to other StreakParty users who view or join that streak.
- Private streaks — visible only to their members.
- Profile — your display name, avatar, bio, achievements, and shared streaks are visible to other users, such as your friends and streak co-members.
- Messages — visible only to the participants of that conversation.
- Check-in photos — visible to members of the streak you posted them in.
4. Service providers
We share data only with the infrastructure providers needed to run the Service:
- Hosting and database — our servers, database, and uploaded photos are hosted on Railway.
- Sign-in providers — Google and Meta (Facebook), only when you choose to sign in with them.
- Email delivery — transactional emails (verification, password reset) are sent through Resend.
These providers process data on our behalf and are not permitted to use it for their own purposes.
5. Data retention
We keep your information for as long as your account exists. Login session records expire and are removed automatically. When you delete your account, your profile, streak memberships, check-ins, photos, messages, and friend connections are deleted, and all active sessions are revoked. Residual copies in encrypted backups are purged on the backup rotation schedule.
6. Deleting your account and data
You can delete your account at any time in the app: Profile → Settings → Delete account. You can also request deletion by contacting us — see Delete your account for details. Deletion is permanent and cannot be undone.
7. Your rights
Depending on where you live (including under the Australian Privacy Act and the GDPR), you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can exercise most of these directly in the app (edit your profile, delete your account), or by contacting us at the address below. If you believe we have not handled your information properly, you may also lodge a complaint with your local privacy regulator.
8. Security
We protect your data with industry-standard measures: passwords are hashed with bcrypt, authentication uses short-lived signed tokens with rotating refresh tokens, and all traffic to the Service is encrypted with HTTPS/TLS. No system is perfectly secure, so please use a strong, unique password.
9. Children
StreakParty is not directed to children under 13 (or the higher minimum age required in your country), and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will delete it.
10. International transfers
Our infrastructure may be located in countries other than your own. Where data is transferred internationally, we take reasonable steps to ensure it receives an equivalent standard of protection.
11. Changes to this policy
We may update this policy from time to time. Material changes will be announced in the app or by email, and the "Last updated" date above will change. Continued use of the Service after changes take effect means you accept the updated policy.
12. Contact us
Questions about privacy or your data? Email us at support@streakparty.com.